Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/8BB6CB12A4D511EB9E4DF342C4F9AE02.roa
File: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (raw, json)
Hash identifier: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=
Subject key identifier: C3:8B:8C:3A:6E:B3:E1:FE:20:51:90:EF:10:50:EE:E8:56:F2:B4:BF
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 06DE
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/8BB6CB12A4D511EB9E4DF342C4F9AE02.roa
Signing time: Fri 24 Jan 2025 22:32:05 +0000
ROA not before: Fri 24 Jan 2025 22:32:05 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 51318
IP address blocks: 166.81.32.0/24 maxlen: 24
166.81.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Jan 24 22:32:05 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679414e4-72a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:c5:07:ba:28:97:8f:f5:d8:7b:94:76:e0:
a3:12:f1:10:9b:05:2d:23:af:89:5e:cf:54:33:d7:
e0:8a:17:8b:0e:d3:94:7d:10:a2:14:3e:7c:25:3b:
05:48:f6:09:bf:6a:33:a4:2f:24:22:0d:91:56:63:
a0:12:43:39:4a:0e:d7:6d:81:df:a7:06:dd:08:85:
ca:23:5a:e0:5d:62:93:24:d1:43:4b:f1:a0:5e:fe:
ac:bc:80:f6:41:b0:82:07:72:82:c7:c2:85:1e:b8:
cf:29:2f:1f:d0:d0:b6:6c:3d:6c:0e:17:4e:53:0f:
a9:ae:5d:5f:3f:b3:cf:eb:50:2b:31:0c:a7:c4:e5:
67:81:74:08:73:5e:60:85:f9:5d:dc:65:a9:3d:3a:
91:4d:9f:0d:51:b0:61:1a:74:4d:47:f5:c3:58:ee:
0e:63:a8:25:22:dd:fc:51:23:63:61:5b:59:a5:46:
30:2a:5e:20:54:f5:ec:cf:33:a1:5e:ad:8d:f4:bc:
e3:07:68:33:d0:5f:a3:c9:b0:44:b4:d5:99:16:55:
9d:7a:e1:a6:91:8b:01:ce:9b:36:28:20:fb:d4:60:
f0:08:f5:fd:6c:6d:85:af:6d:18:0c:df:e4:c1:7b:
49:f9:33:1a:f3:55:d9:ba:03:a0:45:3e:73:70:4c:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8B:8C:3A:6E:B3:E1:FE:20:51:90:EF:10:50:EE:E8:56:F2:B4:BF
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/8BB6CB12A4D511EB9E4DF342C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.81.32.0/24
166.81.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:aa:10:d3:4a:b9:1c:d5:1e:6a:a4:23:e7:e4:9c:01:de:d7:
0a:c8:b6:80:93:3f:8b:9e:78:fe:a2:a8:e3:37:82:d8:51:ff:
94:c9:7e:82:da:a3:2e:05:e2:2e:06:3f:06:7a:9d:9e:bf:70:
80:8e:0a:ff:a1:59:61:9b:0c:01:30:8b:7b:1c:34:31:f4:90:
ef:e2:8a:0d:84:ff:fb:02:eb:57:a1:60:34:74:eb:b8:7a:b3:
85:89:0d:fd:61:44:73:75:2c:2c:42:f7:db:d8:45:ff:15:1a:
f8:6c:ef:de:c5:f8:50:7b:57:46:cb:dd:76:f5:0c:38:9a:87:
6e:cb:c6:5f:45:d9:71:8b:04:8e:66:61:b5:a1:6b:a6:f6:ad:
f5:93:55:97:ba:5f:b2:ad:ec:cc:b2:6b:55:2d:02:84:f7:9e:
c4:ab:2f:1b:4e:ee:56:c2:27:ca:f8:b0:1b:b3:ae:5f:a9:67:
5f:6b:05:9b:93:ff:e4:88:1a:28:cc:3a:59:dc:66:aa:ce:aa:
ae:f3:c4:b3:24:26:c2:00:7b:cf:e2:f6:2e:4b:91:6d:c3:d4:
c7:bb:b3:d8:fe:d2:a8:29:54:c1:f9:82:83:74:21:4b:c7:99:
f5:54:7a:c3:f7:4d:70:fc:44:ce:3b:8e:4e:19:12:4c:a7:6f:
33:c2:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:57:16 2025 by rpki-client